119.73.164.98 Threat Intelligence and Host Information

ipinfopage

General

This page contains threat intelligence information for the IPv4 address 119.73.164.98 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟠 Elevated — 48/100

Geographic Location

Host and Network Information

  • View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
  • Country: Singapore
  • Network: AS3758 singnet
  • Noticed: 12 times
  • Protocols Attacked: mssql
  • Countries Attacked: Poland, Sweden
  • Open Ports: 3389, 443, 5985, 8000, 8010
  • Tor Node: No

Tags

  • abuseipdb
  • blacklist
  • botnet
  • cowrie
  • ddos
  • DDoS
  • denial of service
  • malicious
  • Malicious IP
  • mirai
  • portscan
  • RTBH
  • scan
  • sentrypeer
  • sftp
  • sip
  • smb
  • ssh
  • tanner
  • tcp

MITRE ATT&CK TTPs

  • T1046 - Network Service Scanning
  • T1498 - Network Denial of Service

Associated CVEs

  • CVE-2014-4078

Passive DNS

  • gps-focusguard.com

Attack Log References

Whois Information

inetnum: 119.73.164.96 - 119.73.164.111 netname: FOCUSG-SG descr: FOCUSGUARD LLP descr: NORTHSTAR @ AMK descr: Singapore 569880 country: SG admin-c: YB362-AP tech-c: SH9-AP abuse-c: AS2068-AP status: ASSIGNED NON-PORTABLE notify: hostmaster@singnet.com.sg mnt-by: MAINT-SG-SINGNET mnt-irt: IRT-SINGNET-SG last-modified: 2021-01-20T13:18:04Z irt: IRT-SINGNET-SG address: SingNet Engineering & Operations address: 2 Stirling Road address: Singapore 148943 e-mail: hostmaster@singnet.com.sg abuse-mailbox: hostmaster@singnet.com.sg admin-c: SH9-AP tech-c: SH9-AP mnt-by: MAINT-SG-SINGNET last-modified: 2024-06-21T00:09:02Z role: ABUSE SINGNETSG address: SingNet Engineering & Operations address: 2 Stirling Road address: Singapore 148943 country: ZZ phone: +000000000 e-mail: hostmaster@singnet.com.sg admin-c: SH9-AP tech-c: SH9-AP nic-hdl: AS2068-AP abuse-mailbox: hostmaster@singnet.com.sg mnt-by: APNIC-ABUSE last-modified: 2024-06-21T00:09:46Z person: SingNet Hostmaster address: SingNet Engineering & Operations address: 2 Stirling Road address: Singapore 148943 country: SG phone: +65 7845922 fax-no: +65 4753273 e-mail: hostmaster@singnet.com.sg nic-hdl: SH9-AP notify: hostmaster@singnet.com.sg mnt-by: MAINT-SG-SINGNET last-modified: 2011-12-22T05:14:44Z person: YP BEH address: FOCUSGUARD LLP address: NORTHSTAR @ AMK address: Singapore 569880 country: SG phone: +65 67666081 fax-no: +65 67666093 e-mail: beh@focusguard.com.sg nic-hdl: YB362-AP notify: hostmaster@singnet.com.sg mnt-by: MAINT-SG-SINGNET last-modified: 2010-08-24T06:14:01Z route: 119.73.164.0/24 origin: AS19905 descr: SingNet Pte Ltd mnt-by: MAINT-SG-SINGNET last-modified: 2024-08-23T01:36:18Z